Well if it's a one off then I don't use a GPO either. They are costly in logon times when you have a lot of separate policies. I'd rather try to group them into as few as possible myself.